[galaxy-dev] Can a tool retrieve a user's API KEY?